All pull requests

Pull requests

• Add regression test for exclude filter on non-normalized TFMs

  #1131·mgnslndh opened Sep 25, 2026·

  ·
  1

• fix: Correctly exclude transitive development dependencies

  #1129·mgnslndh opened Sep 25, 2026·

  ·
  1

• fix: resolve $(RootNamespace) in AssemblyName

  #1128·Eljees opened Sep 20, 2026·

  ·
  1

• Bump System.CommandLine from 2.0.8 to 2.0.11

  dependencies.NET
  #1123·dependabot[bot] opened Aug 11, 2026Bot·

  ·

• Bump NuGet.ProjectModel from 7.6.0 to 7.9.0

  dependencies.NET
  #1122·dependabot[bot] opened Aug 11, 2026Bot·

  ·

• Bump RichardSzalay.MockHttp from 7.0.0 to 7.1.0

  dependencies.NET
  #1121·dependabot[bot] opened Aug 10, 2026Bot·

  ·

• Bump Verify.XunitV3 from 31.25.0 to 31.28.0

  dependencies.NET
  #1120·dependabot[bot] opened Aug 3, 2026Bot·

  ·

• build(deps): bump danielpalme/ReportGenerator-GitHub-Action from 5.5.10 to 5.5.11

  dependenciesgithub_actions
  #1119·dependabot[bot] opened Jul 27, 2026Bot·

  ·

• Bump CycloneDX.Core from 12.1.1 to 12.1.2

  dependencies.NET
  #1118·dependabot[bot] opened Jul 22, 2026Bot·

  ·

• build(deps): bump actions/checkout from 7.0.0 to 7.0.1

  dependenciesgithub_actions
  #1114·dependabot[bot] opened Jul 20, 2026Bot·

  ·

• fix: retain all matching dependency range versions

  #1113·mtsfoni opened Jul 19, 2026Member·

  ·
  1

  1

• WIP: add NuGet vulnerability information to BOMs

  #1112·mtsfoni opened Jul 19, 2026Member·

  ·

• feat!: always emit dev dependencies with scope=excluded; deprecate --exclude-dev

  #1044·mtsfoni opened Mar 1, 2026Member·

  ·
  2

• Populate url when processing license expressions

  #999·giovanni-bozzano opened Dec 16, 2025·

  ·
  2

• NugetService: Find PackageVulnerabilityInfo from IVulnerabilityInfoResource (Issue 805)

  #985·LarsPellarin opened Nov 20, 2025·

  ·
  3

• #916 - Allow signing XML BOMs with RSA

  #976·Lachstec opened Oct 14, 2025·

  ·

• #Issue 669 - Evaluation of project properties with the help of Microsoft.Build.Eva…

  #968·gotztibor opened Sep 2, 2025·

  ·
  2

• feat: add evidence collect option

  #944·malytskyy opened May 4, 2025·

  ·
  2

• Added NugetConfigFileService, parsing nuget.config for package sources

  #921·GeorgRottensteiner opened Jan 16, 2025·

  ·
  6

  

• #842 Add additional properties to SBOM

  #846·thompson-tomo opened Jan 29, 2024·

  ·
  1

  2

• Integrate Buildalyzer

  #837·mtsfoni opened Jan 21, 2024Member·

  ·

• #606 When multiple bom ref are found when cdx runs on a .sln allow bom generation.

  #831·mtsfoni opened Jan 13, 2024Member·

  ·

• Nuget package from private feed not found on nuget.org results in error ("Central Directory corrupt.")

  #748·dreammaster38 opened Aug 16, 2023·

  ·
  2

• Fixed FileNotFoundException

  #720·thucnguyen77 opened Jun 8, 2023·

  ·

• Add support for single project.assets.json file which can be use in p…

  #509·hubertignaciuk opened Mar 21, 2022·

  ·